Enabled CSRF protection again